> For the complete documentation index, see [llms.txt](https://staphysec.gitbook.io/staphysec/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://staphysec.gitbook.io/staphysec/pentesting/143-993-pentesting-imap.md).

# 143,993 - Pentesting IMAP

Resourcse : 

* [Hacktricks](https://book.hacktricks.xyz/pentesting/pentesting-imap)
* Atmail [Blog](https://www.atmail.com/blog/imap-101-manual-imap-sessions/).
* second [blog](https://tewarid.github.io/2011/05/10/access-imap-server-from-the-command-line-using-openssl.html).

Internet Message Access Protocol (IMAP)

* **Port 143** - this is the default IMAP non-encrypted port
* **Port 993** - this is the port you need to use if you want to connect using IMAP securely

### FootPrinting

```
sudo nmap <IP> -sV -p110,143,993,995 -sC
curl -k 'imaps://IP' --user user:password -v  #-k By default, every secure connection curl makes is verified to be secure before the transfer takes place. This option makes curl skip the verification step and proceed without checking.
```